Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: 8KWkntQqznt/lNl6pYge1bfYaox5Mn9hznFCyc2WXfk=
Subject key identifier: AF:CF:F8:B7:E0:63:B0:7E:4F:D5:34:4B:41:F3:76:12:38:02:8C:65
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01901D0EFE9E24B2DD03633E54C5C40EC687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 0CEC
Signing time: Sat 15 Jun 2024 18:00:40 +0000
Manifest this update: Sat 15 Jun 2024 18:00:40 +0000
Manifest next update: Sun 16 Jun 2024 18:00:40 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: +P6TUTUlzOuf8mdVnmE3PETPRKuBJEBLAgIcVD4DIQ8=)
2: b_8bewjH8sZQua7pcvR8xe4Hu_w.roa (hash: kBQS1JWXwyTLKND8+sNF+6l99Qs5WkRFFJvCPv1+xYg=)
3: pisCrSzOjAyK_K7IUXrsNaS7ino.roa (hash: tdYF3omJ1nNyxpTJy4PW9ybN+HQXDizu0uQfiwF9qgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0e:fe:9e:24:b2:dd:03:63:3e:54:c5:c4:0e:c6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jun 15 18:00:40 2024 GMT
Not After : Jun 16 18:00:40 2024 GMT
Subject: CN=afcff8b7e063b07e4fd5344b41f3761238028c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:e2:06:6a:19:a3:a6:3c:16:84:6f:5b:d0:
63:f9:dc:c6:8c:39:e0:98:7d:a3:a7:19:06:10:d7:
5b:03:65:85:eb:93:03:58:e4:65:eb:ff:d3:05:3d:
eb:d9:e7:1a:32:c2:75:c1:ae:6d:65:44:93:a6:3f:
be:09:59:90:f7:a7:01:96:ab:15:6c:dc:25:d3:77:
6f:6e:f8:12:5c:e8:a4:c6:4a:8b:74:0d:c4:02:9d:
50:cc:64:e0:60:09:de:78:4a:08:51:67:5a:91:e4:
5e:c1:93:08:02:f4:5b:a9:8e:f8:f4:92:ba:79:39:
42:18:72:4e:bb:c5:99:e3:d4:cf:71:1c:74:4b:89:
a1:e0:ac:22:bb:0f:48:ed:0a:55:39:2d:46:9b:0b:
b8:e7:3e:dc:ae:b5:cc:ab:b0:df:4a:a3:37:22:b2:
de:51:c2:9b:15:a1:92:86:33:d9:13:b9:dd:72:99:
29:c1:55:a8:a3:33:f5:a0:f4:0e:e6:e2:97:6b:34:
f8:87:43:cd:f8:8c:e8:25:58:19:d4:32:26:10:52:
6a:3e:f1:6e:3d:b0:b6:ee:43:48:0e:84:9f:ec:fb:
32:45:f0:6e:ca:63:52:a9:c1:54:80:6c:77:1d:9d:
59:03:9d:34:99:90:57:fa:63:bd:54:11:ec:1f:99:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:F8:B7:E0:63:B0:7E:4F:D5:34:4B:41:F3:76:12:38:02:8C:65
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:23:e5:35:1c:15:56:f3:0c:3e:06:1c:50:bf:60:61:5c:db:
37:b5:2d:b9:98:c6:50:89:f8:af:8e:76:47:af:f0:81:cc:c5:
d5:dc:65:16:fb:6b:61:b3:a6:87:c7:73:7e:96:8b:5b:e0:c6:
dd:dd:1f:34:ec:71:19:08:de:fd:fe:14:b8:01:8a:e9:26:9d:
d6:cc:b1:10:d2:b2:50:84:58:e0:94:d9:d1:a2:8f:c6:10:52:
27:a4:b3:1b:72:2f:8a:1b:19:ab:7e:0e:ce:6e:10:17:ab:5d:
8c:7d:d5:40:33:f3:08:8f:19:6b:ae:6e:9b:91:30:f0:d9:30:
4c:75:71:6a:46:1a:dc:1d:db:a0:f2:54:93:f4:f7:ff:50:1c:
e4:73:ac:37:51:51:9a:95:0d:59:23:9b:73:5f:c9:b2:4c:92:
8b:fd:e1:ba:e1:56:54:67:4e:d6:e5:cf:55:77:25:91:86:b8:
16:63:7f:95:24:77:d6:2a:7b:3d:38:cc:ef:72:2d:a2:cc:60:
d9:61:82:15:c3:62:77:66:97:ce:ef:0f:f8:a9:76:f2:52:c7:
3b:23:a1:89:d9:75:11:f1:4e:e6:c8:15:00:e9:dd:db:9f:7e:
86:8e:80:7d:cc:30:15:65:83:b6:cc:9a:f0:9e:2f:45:20:32:
84:a0:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:06 2024 by rpki-client on console-fra.rpki-client.org